Configuring Latching Inputs, First-In Detection, and Reset Behavior in APL Interlock Blocks

In SIMATIC PCS 7 Advanced Process Library (APL), interlock blocks (Intlk02, Intlk04, Intlk08) dynamically reflect current input states by default: when an input trips to 0 and returns to 1, the output automatically clears. To identify which transient condition tripped a motor or valve, APL provides built-in First-In Detection (FirstIn) on the interlock block and delegates latching to the downstream technological device block (such as MotL or VlvL). Connecting the interlock output to the actuator's Protect or Permit input latches the trip condition, requiring operator acknowledgment via the faceplate Reset button.

APL Interlock Architecture and Input Evaluation Dynamics

In SIMATIC PCS 7 APL, process protection logic relies on standardized interlock blocks: Intlk02 (FB1824), Intlk04 (FB1825), and Intlk08 (FB1826). These blocks evaluate up to 2, 4, or 8 digital process conditions (In01 through In08) and compute a consolidated binary output Out alongside a quality status Out.ST.

By design, standard interlock blocks do not latch their inputs permanently. If input In03 (e.g., lube oil low pressure switch) trips from 1 to 0 for 2 seconds and returns to 1, the interlock output Out momentarily drops to 0 and immediately restores to 1. If an engineer relies solely on the interlock block faceplate, the faceplate returns to green/normal, leaving field operators unable to determine why the driven motor or compressor shut down.

First-In Detection vs Technological Actuator Latching

To resolve transient trip events, APL utilizes a two-tier strategy separating event detection from operational shutdown latching:

Function / RoleImplementing BlockMechanism and BehaviorOperator InteractionFirst-In DetectionIntlk02 / Intlk04 / Intlk08Built-in FirstIn logic captures the exact input that triggered the first trip state.Displays an asterisk or highlight next to the tripped input on the interlock faceplate.Protection LatchingActuator (MotL, MotRevL, VlvL)Interlock Out connected to Protect (or Permit) pin. Actuator latches trip in memory.Actuator enters trip fault state; faceplate requires operator Reset.Manual Reset EnableActuator Feature BitsFeature.Bit19 = 1 activates mandatory operator reset following an interlock trip.Reset button enables on faceplate after interlock condition clears.Central Upstream LatchFlipFlop (FC389) or custom SCLLatches binary signal upstream before feeding multiple device interlocks.Requires custom reset pushbuttons on HMI graphics or CFC logic.

Table 1: Comparison of first-in detection and latching mechanisms in PCS 7 APL.

Configuring Motor and Valve Blocks for Interlock Latching and Reset

The standardized Siemens APL architecture enforces latching at the technological end-device rather than within the interlock block:

Connect Interlock Output to Protection Input:
* In CFC, route Intlk08.Out to the motor block input MotL.Protect (for unconditional shutdown with protection latching) or MotL.Permit (for startup permission).
Configure Actuator Reset Feature Bits:
* Open the block properties of MotL (FB1850).
* Configure Feature.Bit19 = 1 (Resetting the block in case of interlocks or errors). This ensures that even if Protect restores to 1, the motor remains in safe stopped state until an operator presses Reset.
* Optionally set Feature.Bit30 = 1 (Reset depending on operating mode) and Feature.Bit31 = 1 (Resetting via faceplate).
Configure First-In Detection on Interlock Block:
* Interlock blocks automatically record the first input transition to 0.
* When operators open the interlock faceplate from the motor faceplate navigation button, the specific input that caused the shutdown is flagged with the First-In indicator.

Implementing Custom Upstream Latching via Flip-Flop Blocks

If a project specification mandates that the interlock block itself must preserve its tripped state across multiple devices from a central location:
1. Insert the standard library flip-flop block FlipFlop (FC389) or an RS flip-flop block ahead of each interlock input.
2. Connect the field sensor to the S (Set) input (inverted or active-low).
3. Route a centralized reset command (from an APL OpDi01 operator block or global plant reset signal) to the R (Reset) input.
4. While this achieves centralized latching, Siemens strongly recommends the native APL Protect input and FirstIn architecture, as custom flip-flops bypass standardized APL signal status (ST) propagation and alarm timestamping.

Verification

To confirm proper interlock latching and operator visibility:

In CFC test mode, force interlock input In03 to 0 and then immediately back to 1.
Inspect the connected MotL block: confirm that the motor trips immediately into safe stop state.
Observe that after In03 returns to 1, MotL remains stopped with the trip alarm active.
In WinCC Runtime, open the motor faceplate: verify that the interlock status shows protection trip and the Reset button is illuminated.
Click the Interlock button on the motor faceplate to open Intlk08: verify that In03 is highlighted with the First-In diagnostic indicator.
Click Reset on the motor faceplate: confirm the motor clears the fault and enters ready-to-start state.

Limitations and Operational Precautions

Never bypass protection interlocks (Protect) using standard software bypasses without administrative approval; Protect represents personnel and equipment safety interlocks.
If Feature.Bit19 is left at 0 (default), the motor will clear the trip fault automatically as soon as the interlock input restores, which can cause hazardous automatic restarts if continuous run commands (FwdAut) remain active.
First-In detection resets automatically when all interlock inputs return to normal and the associated actuator is acknowledged/reset.

Engineer FAQ

Can I reset an interlock block directly from its own faceplate?

Standard APL interlock faceplates do not include an operator reset button because they are pure evaluation blocks. Resetting is performed on the controlled device faceplate (MotL, VlvL) via the standardized operator reset command.

What is the difference between Permit, Interlock, and Protect inputs on MotL?

Permit prevents starting when 0 but does not stop a running motor. Intlock stops a running motor without latching (resets automatically when input clears). Protect immediately stops the motor and latches the fault, requiring manual reset.

How does First-In detection work if two inputs trip simultaneously?

The interlock block evaluates inputs in order of execution within the CPU cycle (In01 through In08). The first input detected in the false state within that cycle is flagged as First-In.